https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 11 May 2026 02:52:28 +0000 https://vulnerability.circl.lu/sighting/99faad2b-4766-4a6b-a0b3-574c834eb458/export {"uuid": "99faad2b-4766-4a6b-a0b3-574c834eb458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48054", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq55xrzdik2s", "content": "", "creation_timestamp": "2025-05-27T07:26:27.688520Z"} {"uuid": "99faad2b-4766-4a6b-a0b3-574c834eb458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48054", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq55xrzdik2s", "content": "", "creation_timestamp": "2025-05-27T07:26:27.688520Z"} https://vulnerability.circl.lu/sighting/99faad2b-4766-4a6b-a0b3-574c834eb458/export Tue, 27 May 2025 07:26:27 +0000 https://vulnerability.circl.lu/sighting/5e427cc2-9010-476a-a8ab-81fb23faa03e/export {"uuid": "5e427cc2-9010-476a-a8ab-81fb23faa03e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48057", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17664", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48057\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L)\n\ud83d\udd39 Description: Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate() function can be tricked into incorrectly treating certificates as valid. This allows an attacker to send a malicious certificate request that is then treated as a renewal of an already existing certificate, resulting in the attacker obtaining a valid certificate that can be used to impersonate trusted nodes. This only occurs when Icinga 2 is built with OpenSSL older than version 1.1.0. This issue has been patched in versions 2.12.12, 2.13.12, and 2.14.6.\n\ud83d\udccf Published: 2025-05-27T16:32:29.931Z\n\ud83d\udccf Modified: 2025-05-27T16:32:29.931Z\n\ud83d\udd17 References:\n1. https://github.com/Icinga/icinga2/security/advisories/GHSA-7vcf-f5v9-3wr6\n2. https://github.com/Icinga/icinga2/commit/34c93a2542bbe4e9886d15bc17ec929ead1aa152\n3. https://github.com/Icinga/icinga2/commit/4023128be42b18a011dda71ddee9ca79955b89cb\n4. https://github.com/Icinga/icinga2/commit/60f75f4a3d5cbb234eb3694ba7e9076a1a5b8776\n5. https://github.com/Icinga/icinga2/commit/9ad5683aab9eb392c6737ff46c830a945c9e240f\n6. https://github.com/Icinga/icinga2/commit/9b2c05d0cc09210bdeade77cf9a73859250fc48d", "creation_timestamp": "2025-05-27T16:52:50.000000Z"} {"uuid": "5e427cc2-9010-476a-a8ab-81fb23faa03e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48057", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17664", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48057\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L)\n\ud83d\udd39 Description: Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate() function can be tricked into incorrectly treating certificates as valid. This allows an attacker to send a malicious certificate request that is then treated as a renewal of an already existing certificate, resulting in the attacker obtaining a valid certificate that can be used to impersonate trusted nodes. This only occurs when Icinga 2 is built with OpenSSL older than version 1.1.0. This issue has been patched in versions 2.12.12, 2.13.12, and 2.14.6.\n\ud83d\udccf Published: 2025-05-27T16:32:29.931Z\n\ud83d\udccf Modified: 2025-05-27T16:32:29.931Z\n\ud83d\udd17 References:\n1. https://github.com/Icinga/icinga2/security/advisories/GHSA-7vcf-f5v9-3wr6\n2. https://github.com/Icinga/icinga2/commit/34c93a2542bbe4e9886d15bc17ec929ead1aa152\n3. https://github.com/Icinga/icinga2/commit/4023128be42b18a011dda71ddee9ca79955b89cb\n4. https://github.com/Icinga/icinga2/commit/60f75f4a3d5cbb234eb3694ba7e9076a1a5b8776\n5. https://github.com/Icinga/icinga2/commit/9ad5683aab9eb392c6737ff46c830a945c9e240f\n6. https://github.com/Icinga/icinga2/commit/9b2c05d0cc09210bdeade77cf9a73859250fc48d", "creation_timestamp": "2025-05-27T16:52:50.000000Z"} https://vulnerability.circl.lu/sighting/5e427cc2-9010-476a-a8ab-81fb23faa03e/export Tue, 27 May 2025 16:52:50 +0000 https://vulnerability.circl.lu/sighting/3578bbce-bc44-43e3-9940-899f9fc2d139/export {"uuid": "3578bbce-bc44-43e3-9940-899f9fc2d139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48057", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq65vfj6ty22", "content": "", "creation_timestamp": "2025-05-27T17:00:56.259258Z"} {"uuid": "3578bbce-bc44-43e3-9940-899f9fc2d139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48057", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq65vfj6ty22", "content": "", "creation_timestamp": "2025-05-27T17:00:56.259258Z"} https://vulnerability.circl.lu/sighting/3578bbce-bc44-43e3-9940-899f9fc2d139/export Tue, 27 May 2025 17:00:56 +0000 https://vulnerability.circl.lu/sighting/3a035b69-3631-4807-bdc9-37a8a55e696d/export {"uuid": "3a035b69-3631-4807-bdc9-37a8a55e696d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48057", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq6o6pzr3y2k", "content": "", "creation_timestamp": "2025-05-27T21:49:20.178408Z"} {"uuid": "3a035b69-3631-4807-bdc9-37a8a55e696d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48057", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq6o6pzr3y2k", "content": "", "creation_timestamp": "2025-05-27T21:49:20.178408Z"} https://vulnerability.circl.lu/sighting/3a035b69-3631-4807-bdc9-37a8a55e696d/export Tue, 27 May 2025 21:49:20 +0000 https://vulnerability.circl.lu/sighting/56447878-d2bf-45c4-84aa-50c80cfca866/export {"uuid": "56447878-d2bf-45c4-84aa-50c80cfca866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48053", "type": "published-proof-of-concept", "source": "Telegram/AvRPE1FYyApk1Jln3Af0piOZ09oDjaUbhCE1oirCL83hBqc", "content": "", "creation_timestamp": "2025-06-09T13:02:03.000000Z"} {"uuid": "56447878-d2bf-45c4-84aa-50c80cfca866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48053", "type": "published-proof-of-concept", "source": "Telegram/AvRPE1FYyApk1Jln3Af0piOZ09oDjaUbhCE1oirCL83hBqc", "content": "", "creation_timestamp": "2025-06-09T13:02:03.000000Z"} https://vulnerability.circl.lu/sighting/56447878-d2bf-45c4-84aa-50c80cfca866/export Mon, 09 Jun 2025 13:02:03 +0000 https://vulnerability.circl.lu/sighting/422c96f3-6efc-4975-ba36-00c4eae3cb32/export {"uuid": "422c96f3-6efc-4975-ba36-00c4eae3cb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48058", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18939", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48058\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, there is a potential polynomial Regular Expression Denial of Service (ReDoS) vulnerability in the PowSyBl's DataSource mechanism. If successfully exploited, a malicious actor can cause significant CPU consumption due to regex backtracking \u2014 even with polynomial patterns. This issue has been patched in com.powsybl:powsybl-commons: 6.7.2.\n\ud83d\udccf Published: 2025-06-20T00:39:06.725Z\n\ud83d\udccf Modified: 2025-06-20T13:28:27.265Z\n\ud83d\udd17 References:\n1. https://github.com/powsybl/powsybl-core/security/advisories/GHSA-rqpx-f6rc-7hm5\n2. https://github.com/powsybl/powsybl-core/commit/72f79dec6d4292f892fbddd68a19c67935c7d81f\n3. https://github.com/powsybl/powsybl-core/releases/tag/v6.7.2", "creation_timestamp": "2025-06-20T13:42:50.000000Z"} {"uuid": "422c96f3-6efc-4975-ba36-00c4eae3cb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48058", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18939", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48058\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, there is a potential polynomial Regular Expression Denial of Service (ReDoS) vulnerability in the PowSyBl's DataSource mechanism. If successfully exploited, a malicious actor can cause significant CPU consumption due to regex backtracking \u2014 even with polynomial patterns. This issue has been patched in com.powsybl:powsybl-commons: 6.7.2.\n\ud83d\udccf Published: 2025-06-20T00:39:06.725Z\n\ud83d\udccf Modified: 2025-06-20T13:28:27.265Z\n\ud83d\udd17 References:\n1. https://github.com/powsybl/powsybl-core/security/advisories/GHSA-rqpx-f6rc-7hm5\n2. https://github.com/powsybl/powsybl-core/commit/72f79dec6d4292f892fbddd68a19c67935c7d81f\n3. https://github.com/powsybl/powsybl-core/releases/tag/v6.7.2", "creation_timestamp": "2025-06-20T13:42:50.000000Z"} https://vulnerability.circl.lu/sighting/422c96f3-6efc-4975-ba36-00c4eae3cb32/export Fri, 20 Jun 2025 13:42:50 +0000 https://vulnerability.circl.lu/sighting/1c284cd1-b2b4-4455-82d2-dacc4df0ecc0/export {"uuid": "1c284cd1-b2b4-4455-82d2-dacc4df0ecc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48059", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19003", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48059\n\ud83d\udd25 CVSS Score: 2.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U)\n\ud83d\udd39 Description: PowSyBl (Power System Blocks) is a framework to build power system oriented software. In com.powsybl:powsybl-iidm-criteria versions 6.3.0 to before 6.7.2 and com.powsybl:powsybl-contingency-api versions 5.0.0 to before 6.3.0, there is a a potential polynomial Regular Expression Denial of Service (ReDoS) vulnerability in the RegexCriterion class. This class compiles and evaluates an unvalidated, user-supplied regular expression against the identifier of an Identifiable object via Pattern.compile(regex).matcher(id).find(). If successfully exploited, a malicious actor can cause significant CPU exhaustion through repeated or recursive filter(...) calls \u2014 especially if performed over large network models or filtering operations. This issue has been patched in com.powsybl:powsybl-iidm-criteria 6.7.2.\n\ud83d\udccf Published: 2025-06-20T16:50:35.974Z\n\ud83d\udccf Modified: 2025-06-20T17:37:30.252Z\n\ud83d\udd17 References:\n1. https://github.com/powsybl/powsybl-core/security/advisories/GHSA-8qjw-9xgm-c9ff\n2. https://github.com/powsybl/powsybl-core/commit/d8398f689a5ccd505bd62eee2bd6670a29133110\n3. https://github.com/powsybl/powsybl-core/releases/tag/v6.7.2", "creation_timestamp": "2025-06-20T17:46:18.000000Z"} {"uuid": "1c284cd1-b2b4-4455-82d2-dacc4df0ecc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48059", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19003", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48059\n\ud83d\udd25 CVSS Score: 2.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U)\n\ud83d\udd39 Description: PowSyBl (Power System Blocks) is a framework to build power system oriented software. In com.powsybl:powsybl-iidm-criteria versions 6.3.0 to before 6.7.2 and com.powsybl:powsybl-contingency-api versions 5.0.0 to before 6.3.0, there is a a potential polynomial Regular Expression Denial of Service (ReDoS) vulnerability in the RegexCriterion class. This class compiles and evaluates an unvalidated, user-supplied regular expression against the identifier of an Identifiable object via Pattern.compile(regex).matcher(id).find(). If successfully exploited, a malicious actor can cause significant CPU exhaustion through repeated or recursive filter(...) calls \u2014 especially if performed over large network models or filtering operations. This issue has been patched in com.powsybl:powsybl-iidm-criteria 6.7.2.\n\ud83d\udccf Published: 2025-06-20T16:50:35.974Z\n\ud83d\udccf Modified: 2025-06-20T17:37:30.252Z\n\ud83d\udd17 References:\n1. https://github.com/powsybl/powsybl-core/security/advisories/GHSA-8qjw-9xgm-c9ff\n2. https://github.com/powsybl/powsybl-core/commit/d8398f689a5ccd505bd62eee2bd6670a29133110\n3. https://github.com/powsybl/powsybl-core/releases/tag/v6.7.2", "creation_timestamp": "2025-06-20T17:46:18.000000Z"} https://vulnerability.circl.lu/sighting/1c284cd1-b2b4-4455-82d2-dacc4df0ecc0/export Fri, 20 Jun 2025 17:46:18 +0000 https://vulnerability.circl.lu/sighting/0078404a-e2f4-4806-999c-ff42f5124767/export {"uuid": "0078404a-e2f4-4806-999c-ff42f5124767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5cm25ydhn2s", "content": "", "creation_timestamp": "2025-11-10T21:49:09.540788Z"} {"uuid": "0078404a-e2f4-4806-999c-ff42f5124767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5cm25ydhn2s", "content": "", "creation_timestamp": "2025-11-10T21:49:09.540788Z"} https://vulnerability.circl.lu/sighting/0078404a-e2f4-4806-999c-ff42f5124767/export Mon, 10 Nov 2025 21:49:09 +0000 https://vulnerability.circl.lu/sighting/ce323f9f-afd5-4422-8c95-f03274d3383c/export {"uuid": "ce323f9f-afd5-4422-8c95-f03274d3383c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48055", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cnt3rcewx2", "content": "", "creation_timestamp": "2025-11-10T22:22:38.329738Z"} {"uuid": "ce323f9f-afd5-4422-8c95-f03274d3383c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48055", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cnt3rcewx2", "content": "", "creation_timestamp": "2025-11-10T22:22:38.329738Z"} https://vulnerability.circl.lu/sighting/ce323f9f-afd5-4422-8c95-f03274d3383c/export Mon, 10 Nov 2025 22:22:38 +0000 https://vulnerability.circl.lu/sighting/391d83e1-014e-48d5-a8d7-9dece38afaf2/export {"uuid": "391d83e1-014e-48d5-a8d7-9dece38afaf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48055", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5crgjsei3f2", "content": "", "creation_timestamp": "2025-11-10T23:25:48.251239Z"} {"uuid": "391d83e1-014e-48d5-a8d7-9dece38afaf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48055", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5crgjsei3f2", "content": "", "creation_timestamp": "2025-11-10T23:25:48.251239Z"} https://vulnerability.circl.lu/sighting/391d83e1-014e-48d5-a8d7-9dece38afaf2/export Mon, 10 Nov 2025 23:25:48 +0000